A full sign-in (password + authenticator code) is needed for account settings. A remembered device is not used here.